xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-94f8614245de560c8a4202c17cfdaaf495983521dd6667197e36493df787e106

General

Target

HEUR-Trojan.Win32.Miner.gen-94f8614245de560c8a4202c17cfdaaf495983521dd6667197e36493df787e106
Size

2.7MB
MD5

d7e9fbea0ca2ffbbd1a4605df45312fb
SHA1

088140a471267d09973fdab3bd877c85c1309643
SHA256

94f8614245de560c8a4202c17cfdaaf495983521dd6667197e36493df787e106
SHA512

1e677405ac0827837f6fa026af16a691083612ac223e4b96fed4cd6538d90603accb2e6e0984ddb48b61cc224954a76ff20e72d8316076891fa3a6355c0c8013
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEdMKPFoTzDRrD:BemTLkNdfE0pZrV56utgpPFoR

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-94f8614245de560c8a4202c17cfdaaf495983521dd6667197e36493df787e106